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DETAILED ACTION 

1. Claims 1-22 have been examined and is in response to the Request 
for Continuation Examination. 

Continued Examination Under 37 CFR 1.114 

2. A request for continued examination under 37 CFR 1. 1 14, 
including the fee set forth in 37 CFR 1.17(e), was filed in this application 
after final rejection. Since this application is eligible for continued 
examination under 37 CFR 1.114, and the fee set forth in 37 CFR 1.17(e) 
has been timely paid, the finality of the previous Office action has been 
withdrawn pursuant to 37 CFR 1. 1 14. Applicant's submission filed on 
September 6, 2005 has been entered. 

Claim Rejections - 35 USC §103 

The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or 
described as set forth in section 102 of this title, if the differences between the subject 
matter sought to be patented and the prior art are such that the subject matter as a 
whole would have been obvious at the time the invention was made to a person having 
ordinary skill in the art to which said subject matter pertains. Patentability shall not be 
negatived by the manner in which the invention was made. 
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3. Claims 1-8, 10-20, and 22 are rejected under 35 U.S.C. 103(a) 
as being unpatentable over Wright, et al. (US 6,084,969) in view of 
Ellison (US 6,073,237). 

As per claim 1: 

Wright, et al. disclose a method for encrypting an original 
document for distribution to a selected recipient chosen from a plurality 
of possible recipients, comprising the steps of: 

generating a session key based on a random number [col. 11, lines 
46-50] privately maintained by only the owner, including the encryptor 
[col. 9, lines 51-52]^ of the original document; [col. 5, lines 2-4 and 
col.7, lines 10-11] 

encrypting the original document with the session key to create an 
encrypted document; [col. 5, lines 21-22 and col.7, lines 12-13] 

generating a proxy key based on a public key [col. 10, lines 26-28 
and col. 11, line 11] corresponding to the selected recipient; and [col. 11, 
lines 65-67 and col. 14, lines 35-36] 

transforming the encrypted document with a proxy key to create a 
transformed document, wherein no clear-text document is revealed 
during the transformation, [col. 12, lines 55-56 and col. 14, lines 65- 
67; where Wright discloses a straight through process of the encryption 
and the re-encryption process throughout the transformation of the 
encrypted document without any interruptions or descriptions the clear- 
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text document being revealed. Therefore, no clear-text was reveal 
because it is inherent to not reveal any clear-text document during the 
transformation due to security reasons and the purpose of safeguarding 
the document from unintended or untrustworthy persons that does not 
have the proper key or information.] 

It is obvious that Wright disclose the session key is maintained by 
"only" the owner of the original document (see Wright on col.3, line 51 
and col.9, lines 51-52). However, Wright did not fully disclose the 
element "only" by the owner. 

Ellison does fully disclose the private key is known only to the user 
(see Ellison on col.l, lines 20-26). Therefore, it would have been obvious 
of ordinary skills in the art to combine the teaching of Wright with 
Ellison that the private or session key is known and maintained by only 
the owner in order to secure the transactions of the user. 
As per claim 2: See Wright on col. 14, lines 65-67; discusses 
transforming the transformed document to the selected recipient. 
As per claim 3: See Wright on col. 12, lines 5-1 and col. 14, lines 41- 
42; discusses recovering the session key from the transformed document 
and decrypting the transformed document with the session key to 
recover the original document. 

As per claim 4: See Wright on col. 13, line 51; discusses applying the 
private key corresponding to the selected recipient. 
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As per claim 5: See Wright on col.5, lines 45-56; discusses an 
encryption step is a combination of a symmetric private key encryption 
scheme and an asymmetric public key encryption scheme. 
As per claim 6: See Wright on col.5, lines 45-56; discusses the 
asymmetric public key encryption scheme is based on the ElGamal 
encryption scheme. 

As per claim 7: See Wright on col.7, lines 3-5 and col. 11, lines 10- 

11; discusses the encrypted document comprises a first portion 
representative of the original document encrypted via the symmetric 
private key encryption scheme using the session key, and a second 
portion representative of the session key encrypted using an owner's 
private key according to the asymmetric public key encryption scheme 
(col.7, lines 20-21). 
As per claim 8: 

Wright discloses the original document is distributed to the 
selected recipient through at least one additional intermediate grantor by 
repeating the following steps for each additional intermediate grantor: 

generating a new proxy key based on the intermediate grantor's 
public key; and [col. 14, lines 65-67] 

transforming the encrypted document with the new proxy key to 
create a transformed document customized for the intermediate grantor, 
[col. 13, lines 50-51] 
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As per claim 10: See Wright on col.7, lines 3-5 and col. 11, lines 10- 

11; discusses the encrypted document comprises a first portion 
representative of the original document encrypted via the symmetric 
private-key encrypted scheme using the session key, and a second 
portion representative of the session key encrypted using an owner's 
private key according to the asymmetric public-key encryption scheme. 
As per claim 11: See Wright on col. 5, lines 45-56; discusses 
encrypted with the modified ElGamal encryption scheme. 
As per claim 12: See Wright on col., lines; discusses generating a 
session key [col. 11, lines 46-50], encrypting the original document 
[col. 5, lines 21-22 and col.7, lines 12-13], generating a proxy key 
[col. 10, lines 26-28 and col. 11, line 11], transforming the encrypted 
document are performed by the grantor [col. 12, lines 55-56 and col. 14, 
lines 65-67] 

As per claim 13: 

Wright, et al. disclose a system operable to encrypt an original 
document for distribution to a selected recipient chosen from a plurality 
of possible recipients, comprising: 

a session key generation system that generates a session key 
based on a random number [col. 11, lines 46-50] privately maintained 
by only the owner, including the encryptor [col.9, lines 51-52], of the 
original document; [col. 5, lines 2-4 and col.7, lines 10-11] 
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an encryption system that encrypts the original document with 
the session key to create an encrypted document; [col. 5, lines 21-22 
and col.7, lines 12-13] 

a proxy key generation system that generates a proxy key based on 
a public key [col. 10, lines 26-28 and col. 11, line 11] corresponding to 
the selected recipient; and [col. 11, lines 65-67 and col. 14, lines 35-36] 

a transformation system that transforms the encrypted document 
with a proxy key to create a transformed document, wherein no clear-text 
document is revealed during the transformation, [col. 12, lines 55-56 
and col. 14, lines 65-67; where Wright discloses a straight through 
process of the encryption and the re-encryption process throughout the 
transformation of the encrypted document without any interruptions or 
descriptions the clear-text document being revealed. Therefore, no clear- 
text was reveal because it is inherent to not reveal any clear- text 
document during the transformation due to security reasons and the 
purpose of safeguarding the document from unintended or 
untrustworthy persons that does not have the proper key or information.] 

It is obvious that Wright disclose the session key is maintained by 
"only" the owner of the original document (see Wright on col.3, line 51 
and col. 9, lines 51-52). However, Wright did not fully disclose the 
element "only" by the owner. 

Ellison does fully disclose the private key is known only to the user 
(see Ellison on col.l, lines 20-26). Therefore, it would have been obvious 
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of ordinary skills in the art to combine the teaching of Wright with 
Ellison that the private or session key is known and maintained by only 
the owner in order to secure the transactions of the user. 
As per claim 14: See Wright on col. 14, lines 65-67; discusses 
transmitting system that transmits the transforming the transformed 
document to the selected recipient. 

As per claim 15: See Wright on col. 12, lines 5-1 and col. 14, lines 
41-42; discusses a recovering system that recovers the session key from 
the transformed document and decrypting system that decrypts the 
transformed document with the session key to recover the original 
document. 

As per claim 16: See Wright on col. 13, line 51; discusses the recovery 
of the session key is performed by applying the private key corresponding 
to the selected recipient. 

As per claim 17: See Wright on col.5, lines 45-56; discusses the 
encryption is performed with a combination of a symmetric private key 
encryption scheme and an asymmetric public key encryption scheme. 
As per claim 18: See Wright on col.5, lines 45-56; discusses the 
asymmetric public key encryption scheme is based on the ElGamal 
encryption scheme. 

As per claim 19: See Wright on col. 7, lines 3-5 and col. 11, lines 10- 

11; discusses the encrypted document comprises a first portion 
representative of the original document encrypted via the symmetric 
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private key encryption scheme using the session key, and a second 
portion representative of the session key encrypted using an owner's 
private key according to the asymmetric public key encryption scheme 
(col.7, lines 20-21). 

As per claim 20: See Wright col. 14, lines 65-67 and col. 13, lines 50- 

51; discloses the original document is distributed to the selected 
recipient through at least one additional intermediate grantor by 
repeating the following steps for each additional intermediate grantor by 
using the proxy key generation system to generate a new proxy key based 
on the intermediate grantor's public key and using the transformation 
system to transform the encrypted document with the new proxy key to 
create a transformed document customized for the intermediate grantor. 
As per claim 22: See Wright on col. 5, lines 45-56; discusses 
encrypted with the modified ElGamal encryption scheme. 
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Claim Rejections - 35 USC §103 

The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or 
described as set forth in section 102 of this title, if the differences between the subject 
matter sought to be patented and the prior art are such that the subject matter as a 
whole would have been obvious at the time the invention was made to a person having 
ordinary skill in the art to which said subject matter pertains. Patentability shall not be 
negatived by the manner in which the invention was made, 

3. Claims 9 and 21 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Wright, et al. (US 6,084,969) and Ellison (US 
6,073,237), and in further view of Irish Times "Encryption 
Technology to Thwart Computer Hackers System Should Protect 
Security of E-Commerce" (City Edition). 

As per claim 9: 

Wright disclose a method for encrypting an original document for 
distribution to a selected recipient chosen from a plurality of possible 
recipients comprising generating a session key based on a random 
number [col. 11, lines 46-50] privately maintained by only the owner, 
including the encryptor [col. 9, lines 51-52], of the original document 
[col. 5, lines 2-4 and col.7, lines 10-11], encrypting the original 
document with the session key to create an encrypted document [col. 5, 
lines 21-22 and col.7, lines 12-13], generating a proxy- key based on a 
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public key [col. 10, lines 26-28 and col. 11, line 11] corresponding to 
the selected recipient, and [col. 11, lines 65-67 and col. 14, lines 35-36] 

However, Wright did not include the Cramer-Shoup encryption scheme. 

The Irish Times disclosed in its article "Encryption Technology to 
Thwart Computer Hackers System Should Protect Security of E- 
Commerce* a Cramer-Shoup encryption scheme [paragraph 4] where 
this encryption was developed by mathematicians from IBM and Swiss 
Federal Institute of Technology to have created an unbreakable 
protection for computer data [paragraph 2]. Cramer-Shoup method 
thwarts attacks of decoding encrypted messages passing through the 
network with bogus messages by adding another series of calculations 
which ensure the server leaks no information when responding to the 
bogus text [paragraph 6]. 

Therefore, it would have been obvious for a person of ordinary 
skills in the art at the time of the invention to combine the teachings of 
Wright & Ellison with Cramer-Shoup encryption scheme as taught by 
The Irish Times because this method thwarts attacks of decoding 
encrypted messages passing through the network with bogus messages 
by adding another series of calculations which ensure the server leaks no 
information when responding to the bogus text. 
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As per claim 21: 

Wright disclose a method for encrypting an original document for 
distribution to a selected recipient chosen from a plurality of possible 
recipients comprising generating a session key based on a random 
number [col. 11, lines 46-50] privately maintained by only the owner, 
including the enciyptor [col.9, lines 51-52], of the original document 
[col. 5, lines 2-4 and col.7, lines 10-11], encrypting the original 
document with the session key to create an encrypted document [col. 5, 
lines 21-22 and col.7, lines 12-13], generating a proxy key based on a 
public key [col. 10, lines 26-28 and col. 11, line 11] corresponding to 
the selected recipient, and [col. 11, lines 65-67 and col. 14, lines 35-36] 
However, Wright did not include the Cramer-Shoup encryption scheme. 

The Irish Times disclosed in its article "Encryption Technology to 
Thwart Computer Hackers System Should Protect Security of E- 
Commerce" a Cramer-Shoup encryption scheme [paragraph 4] where 
this encryption was developed by mathematicians from IBM and Swiss 
Federal Institute of Technology to have created an unbreakable 
protection for computer data [paragraph 2]. Cramer-Shoup method 
thwarts attacks of decoding encrypted messages passing through the 
network with bogus messages by adding another series of calculations, 
which ensure the server, leaks no information when responding to the 
bogus text [paragraph 6]. 
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Therefore, it would have been obvious for a person of ordinary 
skills in the art at the time of the invention to combine the teachings of 
Wright 8s Ellison with Cramer-Shoup encryption scheme as taught by 
The Irish Times because this method thwarts attacks of decoding 
encrypted messages passing through the network with bogus messages 
by adding another series of calculations which ensure the server leaks no 
information when responding to the bogus text. 



Conclusion 

Any inquiry concerning this communication or earlier 
communications from the examiner should be directed to LEYNNA T. HA 
whose telephone number is (571) 272-3851. The examiner can normally 
be reached on Monday - Thursday (7:00 - 5:00PM). 

If attempts to reach the examiner by telephone are unsuccessful, 
the examiner's supervisor, Kim Vu can be reached on (571) 272-3859. 
The fax phone number for the organization where this application or 
proceeding is assigned is 571-273-8300. 
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Information regarding the status of an application may be obtained 
from the Patent Application Information Retrieval (PAIR) system. Status 
information for published applications may be obtained from either 
Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more 
information about the PAIR system, see http://pair-direct.uspto.gov. 
Should you have questions on access to the Private PAIR system, contact 
the Electronic Business Center (EBC) at 866-217-9197 (toll-free). 
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